Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.

Comments:EventID.Net
As per Microsoft: "This event can occur if diagnostic logging has been turned up. It can be seen in situations where there are problems with the public folder hierarchy, and/or content replication. The error code in the event description will give an indication as to the underlying cause. Use the ERROR.EXE tool on the Exchange Server CD to decode the error". See MSEX2K3DB for more information regarding this issue.
x
5

Woodrow Wayne Collins
This issue may occur if replication for the Messaging Database (MDB) on the server has been turned off. You can turn off replication using the Replication registry entry with a value of 0. By default, replication occurs if the key does not exist. See ME812294.
x
3